The alternative is to install a binary that has full access to the computer.

Chrome is a binary. What's your point?

I assume it's something like: choosing to forego the protection of a battle-tested sandbox in favor of rawdogging random binaries off the internet would be insane.